-2

Few weeks ago, i activated on my server on automatic abuse report mail when someone try to brute force my SSH, i did it because i got an average of 3000 spamming IP each weeks.

But today, my ISP send me a mail saying that someone is reporting me for mail spamming. I checked all the activity of my server to check that i haven't any mail sent except abuse mails. I disabled this feature while this case is not resolved.

Anyone know what the law say about this? Is an abuse report mail can be assimilated to a spam?

EDIT : The main question is if an abuse report (XARF) sent to the abuse mailbox of an ISP can be assimilated to a SPAM. And in the case of this is the reason of the complain (my server was not corrupted), what can i do.

4
  • 3
    The two may be entirely unrelated. Ask your ISP for further details. The law is irrelevant here, really.
    – ceejayoz
    Feb 8 '19 at 16:32
  • I am actually waiting for an answer from them
    – redheness
    Feb 8 '19 at 17:00
  • I would make sure your config is secure too, to be sure your server dont act as a relay
    – yagmoth555
    Feb 8 '19 at 17:59
  • How can i check this, i remember that i don't accept to be a relay. But in the case of i made an error, how can i check that. Also, my ISP impose to use they relay and be authenticated to send mail, then, if someone want to send a mail from my server, he is imposed to go trough my postfix server. And i didn't find any trace of other mail in my logs.
    – redheness
    Feb 9 '19 at 13:26
3

You should consider logging the IP in a file somewhere instead of sending an email for each attempt, because that's a lot of e-mail and may be against your ISP's term of service.

I recommend using Fail2ban to ban the source IP after too much failed attempts.

1
  • It's exactly what i do, and after too many attempts, i ban them for a week and send a mail to the ISP of the IP, the mail sent is a XARF report (xarf.org). Generally i got a thank you mail for reporting them, and often some news about the resolution of the case.
    – redheness
    Feb 9 '19 at 13:17

Not the answer you're looking for? Browse other questions tagged or ask your own question.